From e82cbde37a2d4759c3130b8c4569376fcc6fb88c Mon Sep 17 00:00:00 2001 From: Maricia Alforque Date: Wed, 3 Jan 2018 19:00:04 +0000 Subject: [PATCH] Merged PR 5119: Added new AccountPoliciesAccountLockoutPolicy policies to Policy CSP --- ...csp-accountpoliciesaccountlockoutpolicy.md | 206 ++++++++++++++++++ 1 file changed, 206 insertions(+) create mode 100644 windows/client-management/mdm/policy-csp-accountpoliciesaccountlockoutpolicy.md diff --git a/windows/client-management/mdm/policy-csp-accountpoliciesaccountlockoutpolicy.md b/windows/client-management/mdm/policy-csp-accountpoliciesaccountlockoutpolicy.md new file mode 100644 index 0000000000..dfe6305024 --- /dev/null +++ b/windows/client-management/mdm/policy-csp-accountpoliciesaccountlockoutpolicy.md @@ -0,0 +1,206 @@ +--- +title: Policy CSP - AccountPoliciesAccountLockoutPolicy +description: Policy CSP - AccountPoliciesAccountLockoutPolicy +ms.author: maricia +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: nickbrower +ms.date: 12/29/2017 +--- + +# Policy CSP - AccountPoliciesAccountLockoutPolicy + +> [!WARNING] +> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. + + +
+ + +## AccountPoliciesAccountLockoutPolicy policies + +
+
+ AccountPoliciesAccountLockoutPolicy/AccountLockoutDuration +
+
+ AccountPoliciesAccountLockoutPolicy/AccountLockoutThreshold +
+
+ AccountPoliciesAccountLockoutPolicy/ResetAccountLockoutCounterAfter +
+
+ +
+ +**AccountPoliciesAccountLockoutPolicy/AccountLockoutDuration** + + + + + + + + + + + + + + + + + + + + + +
HomeProBusinessEnterpriseEducationMobileMobile Enterprise
cross markcheck mark4check mark4check mark4check mark4cross markcross mark
+ + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
+ + + +Added in Windows 10, next major release. This security setting determines the number of minutes a locked-out account remains locked out before automatically becoming unlocked. The available range is from 0 minutes through 99,999 minutes. If you set the account lockout duration to 0, the account will be locked out until an administrator explicitly unlocks it. + +If an account lockout threshold is defined, the account lockout duration must be greater than or equal to the reset time. + +Default: None, because this policy setting only has meaning when an Account lockout threshold is specified. + + + + + + + + + + + + +
+ +**AccountPoliciesAccountLockoutPolicy/AccountLockoutThreshold** + + + + + + + + + + + + + + + + + + + + + +
HomeProBusinessEnterpriseEducationMobileMobile Enterprise
cross markcheck mark4check mark4check mark4check mark4cross markcross mark
+ + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
+ + + +Added in Windows 10, next major release. This security setting determines the number of failed logon attempts that causes a user account to be locked out. A locked-out account cannot be used until it is reset by an administrator or until the lockout duration for the account has expired. You can set a value between 0 and 999 failed logon attempts. If you set the value to 0, the account will never be locked out. + +Failed password attempts against workstations or member servers that have been locked using either CTRL+ALT+DELETE or password-protected screen savers count as failed logon attempts. + +Default: 0. + + + + + + + + + + + + +
+ +**AccountPoliciesAccountLockoutPolicy/ResetAccountLockoutCounterAfter** + + + + + + + + + + + + + + + + + + + + + +
HomeProBusinessEnterpriseEducationMobileMobile Enterprise
cross markcheck mark4check mark4check mark4check mark4cross markcross mark
+ + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
+ + + +Added in Windows 10, next major release. This security setting determines the number of minutes that must elapse after a failed logon attempt before the failed logon attempt counter is reset to 0 bad logon attempts. The available range is 1 minute to 99,999 minutes. + +If an account lockout threshold is defined, this reset time must be less than or equal to the Account lockout duration. + +Default: None, because this policy setting only has meaning when an Account lockout threshold is specified. + + + + + + + + + + + + +
+ +Footnote: + +- 1 - Added in Windows 10, version 1607. +- 2 - Added in Windows 10, version 1703. +- 3 - Added in Windows 10, version 1709. + + +